diff options
Diffstat (limited to 'ssl/test/runner/runner.go')
| -rw-r--r-- | ssl/test/runner/runner.go | 45 |
1 files changed, 24 insertions, 21 deletions
diff --git a/ssl/test/runner/runner.go b/ssl/test/runner/runner.go index ec20947..ac11b8e 100644 --- a/ssl/test/runner/runner.go +++ b/ssl/test/runner/runner.go @@ -6484,30 +6484,33 @@ func addSignatureAlgorithmTests() { expectedError: ":NO_COMMON_SIGNATURE_ALGORITHMS:", }) - // Test that RSA-PSS is enabled by default for TLS 1.2. - testCases = append(testCases, testCase{ - testType: clientTest, - name: "RSA-PSS-Default-Verify", - config: Config{ - MaxVersion: VersionTLS12, - SignSignatureAlgorithms: []signatureAlgorithm{ - signatureRSAPSSWithSHA256, + // Disabled because RSA-PSS support was removed in this branch. + if false { + // Test that RSA-PSS is enabled by default for TLS 1.2. + testCases = append(testCases, testCase{ + testType: clientTest, + name: "RSA-PSS-Default-Verify", + config: Config{ + MaxVersion: VersionTLS12, + SignSignatureAlgorithms: []signatureAlgorithm{ + signatureRSAPSSWithSHA256, + }, }, - }, - flags: []string{"-max-version", strconv.Itoa(VersionTLS12)}, - }) + flags: []string{"-max-version", strconv.Itoa(VersionTLS12)}, + }) - testCases = append(testCases, testCase{ - testType: serverTest, - name: "RSA-PSS-Default-Sign", - config: Config{ - MaxVersion: VersionTLS12, - VerifySignatureAlgorithms: []signatureAlgorithm{ - signatureRSAPSSWithSHA256, + testCases = append(testCases, testCase{ + testType: serverTest, + name: "RSA-PSS-Default-Sign", + config: Config{ + MaxVersion: VersionTLS12, + VerifySignatureAlgorithms: []signatureAlgorithm{ + signatureRSAPSSWithSHA256, + }, }, - }, - flags: []string{"-max-version", strconv.Itoa(VersionTLS12)}, - }) + flags: []string{"-max-version", strconv.Itoa(VersionTLS12)}, + }) + } } // timeouts is the retransmit schedule for BoringSSL. It doubles and |